Network issue in Macos Intel: Cannot pull repo by registry-1.docker.io and Cannot request website like "google" inside container

[xiantang]

Description

I use macOS Monterey and try to use colima to replace docker Desktop.

But sometime I can meet this two issue at same time no matter how whether I use AnyConnect VPN :

1. Cannot pull repo by registry-1.docker.io but I can visit this link using chrome.

2. Cannot request website like "google" inside container My container will request public and internal webside when it start, but I find it cannot to request any website which is base on HTTP/HTTPS

when I try to use cURL to request google it will stuck long time.

Version

git commit: 8bb1101a861a8b6d2ef6e16aca97a835f65c4f8f

runtime: docker arch: x86_64 client: v20.10.14 server: v20.10.11

Operating System

• [X] macOS Intel
• [ ] macOS M1
• [ ] Linux

Reproduction Steps

No response

Expected behaviour

No response

Additional context

I think this two issue is related, because it's happen in same time

[vigohe]

same issue! but now it's working after I restart colima

colima stop
colima start

[rlaabs]

same issues (with same MacOS version) also on M1 mac.

runtime: docker arch: aarch64 client: v20.10.17 server: v20.10.11

[ventsislav-georgiev]

Sporadically the networking breaks. Sometimes even on existing images, the docker metadata check for new version of the tag fails. colima stop && colima start always fixes it.

[SuperFola]

I haven't had any problem like this (M1 Mac) since I added the certificates of docker and our private registry to the VM, but that could be a different problem, though I had the same error messages (most likely SSL related problems).

[techguy0079]

@SuperFola Can you please share the steps which helped you in the SSL problems while accessing registry-1.docker.io. I have uploaded the certs to /etc/docker/certs.d directory inside the VM but still the same issue. I am unable to pull images form docker hub as SSL issue is not resolved. Any help would be appreciated.

[korjavin]

I added the certificates of docker and our private registry to the VM

How you did this?

[xiantang]

migrated to Orbstack,Closed